OwnCast remote code execution vulnerability

GHSA-392h-r46j-q24p · CVE-2023-46480

Published Nov 28, 2023 · Modified Nov 28, 2023

Description

An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-46480
PACKAGE https://github.com/owncast/owncast
WEB https://github.com/shahzaibak96/CVE-2023-46480

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes